Read the docs

Perl

Records70All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical17CVSS 9.0–10.0
CVSS high27CVSS 7.0–8.9

Exploited now

Perl records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

10 records in Dbi · all components

TI-2026-12417 CVE-2026-14739 · GHSA-w9gf-c5hh-cc8w

Out-of-bounds write in HMBRAND DBI

Priority MEDIUM 49

DBI versions before 1.650 for Perl have a heap overflow when preparsing SQL statements with an extreme number of placeholders.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00413 Published 2026-07-07 Partial fix · 1.650 CWE-787
TI-2026-09339 CVE-2026-10879 · GHSA-c7xw-cj86-m724

Out-of-bounds write in HMBRAND DBI

Priority MEDIUM 49

DBI versions before 1.648 for Perl have a heap overflow when preparsing SQL statements with more than 9 binders.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00485 Published 2026-06-05 Partial fix · 1.648 CWE-787
TI-2026-08500 CVE-2026-9698 · GHSA-83j7-3c78-fq8j

Out-of-bounds write in HMBRAND DBI

Priority MEDIUM 48

DBI versions before 1.648 for Perl saved errors in a limited-sized buffer.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00464 Published 2026-06-09 Partial fix · 1.648 CWE-787
Priority MEDIUM 47

DBI versions before 1.650 for Perl read one byte out-of-bounds in preparse when deleting an initial SQL comment.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00387 Published 2026-07-07 Partial fix · 1.650 CWE-125
Open these records in search →